MoSucker 2.30
(Backdoor.Win32.MoSucker.23)
(Backdoor.Win32.MoSucker.22.plugin)

by Krusty

Written in Visual Basic

Created in 2002

Made in Germany

more versions





Server:
c:\WINDOWS\VVUIJOE.EXE 

size: 141 KB

port: 1037 TCP

startup:
HKLM\Software\Microsoft\Active Setup\Installed Components\{RTEMRSP-VHE-KGSOZ-ENJDG-TDTFHWTKNFFN} "StubPath" 


Added:
c:\WINDOWS\winstart.bat 
c:\WINDOWS\xqwrmthm.sys 

MegaSecurity